A JavaScript injection found on a compromised Magento website loads a skimmer from jsdelivr.at and then exfiltrates the stolen data back.